News for hackers. Stuff that matters.

A comment on Upcoming Changes to Let's Encrypt Certificates. Parent comment

Re:Upcoming Changes to Let's Encrypt Certificates by immibis on Monday December 15, 2025 @07:01PM (#46282829)
It started being enforced only after major USA ISPs started injecting malware into every HTTP page. If it was a theoretical concern I might agree with you, but in reality, it actually happened which overrules any theoretical arguments. Also, PRISM.
[ Parent | on HN ]
Re:Upcoming Changes to Let's Encrypt Certificates by mpyne on Monday December 15, 2025 @08:14PM (#46283471)
> Also, PRISM.

PRISM works fine to recover HTTPS-protected communications. If anything NSA would be happier if every site they could use PRISM on used HTTPS, that's simply in keeping with NOBUS principles.

[ Parent | on HN ]
Re:Upcoming Changes to Let's Encrypt Certificates by majorchord on Monday December 15, 2025 @08:17PM (#46283490)
> PRISM works fine to recover HTTPS-protected communications

Source:

[ Parent | on HN ]
Re:Upcoming Changes to Let's Encrypt Certificates by mpyne on Monday December 15, 2025 @08:21PM (#46283524)
https://en.wikipedia.org/wiki/PRISM

They collect it straight from the company after it's already been transmitted. It's not a wiretap, it's more akin to an automated subpoena enforcement.

[ Parent | on HN ]
Re:Upcoming Changes to Let's Encrypt Certificates by immibis on Tuesday December 16, 2025 @06:06AM (#46287161)
They also do wiretaps, and the exact name of the program is not relevant.
[ Parent | on HN ]
Re:Upcoming Changes to Let's Encrypt Certificates by reactordev on Tuesday December 16, 2025 @08:10AM (#46288061)
Oh it’s way more pervasive.

That’s just what the public knows. It goes far beyond that.

Most of the good projects in DoD space have Star Wars names. BESPIN, JEDI, etc. PRISM is a mechanism, one aspect of a much larger machine.

[ Parent | on HN ]